Emergent Strategic Reasoning Risks in AI: A Taxonomy-Driven Evaluation Framework
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
As reasoning capacity and deployment scope grow in tandem, large language models (LLMs) gain the capacity to engage in behaviors that serve their own objectives, a class of risks we term Emergent Strategic Reasoning Risks (ESRRs). These include, but are not limited to, deception (intentionally misleading users or evaluators), evaluation gaming (strategically manipulating performance during safety testing), and reward hacking (exploiting misspecified objectives). Systematically understanding and benchmarking these risks remains an open challenge. To address this gap, we introduce ESRRSim, a taxonomy-driven agentic framework for automated behavioral risk evaluation. We construct an extensible risk taxonomy of 7 categories, which is decomposed into 20 subcategories. ESRRSim generates evaluation scenarios designed to elicit faithful reasoning, paired with dual rubrics assessing both model responses and reasoning traces, in a judge-agnostic and scalable architecture. Evaluation across 11 reasoning LLMs reveals substantial variation in risk profiles (detection rates ranging 14.45%-72.72%), with dramatic generational improvements suggesting models may increasingly recognize and adapt to evaluation contexts.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 25 of its 28 references that are in the map. First posted on arXiv 23 Apr 2026.
Builds on
25 of 28 references.
Closest ancestors · 2
Same direction, newest first
- 2026Why Reasoning Fails to Plan: A Planning-Centric Analysis of Long-Horizon Decision Making in LLM Agents29 Jan
- 2025Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents17 Feb
Other references · 23
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 668
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
- 2025Reasoning Models Don't Always Say What They Thinkcited by 388
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 338
- 2024Alignment faking in large language modelscited by 316
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2017Multi-agent Reinforcement Learning in Sequential Social Dilemmascited by 206
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 174
- 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 136
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
11 more
- 2022Is Power-Seeking AI an Existential Risk?cited by 101
- 2025SycEval: Evaluating LLM Sycophancycited by 101
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitorscited by 81
- 2025Stress Testing Deliberative Alignment for Anti-Scheming Trainingcited by 71
- 2024Towards evaluations-based safety cases for AI schemingcited by 32
- 2025The Traitors: Deception and Trust in Multi-Agent Language Model Simulationscited by 30
- 2025AgentMisalignment: Measuring the Propensity for Misaligned Behaviour in LLM-Based Agentscited by 22
- 2025Evaluating the Goal-Directedness of Large Language Modelscited by 15
- 2025Auditing Games for Sandbaggingcited by 10
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blindcited by 7
- 2025Evaluating the Critical Risks of Amazon's Nova Premier under the Frontier Model Safety Frameworkcited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Enhancing Agent Safety Judgment: Controlled Benchmark Rewriting and Analogical Reasoning for Deceptive Out-of-Distribution Scenarios
- 2024LLM as a Mastermind: A Survey of Strategic Reasoning with Large Language Models
- 2025LM Agents May Fail to Act on Their Own Risk Knowledge
- 2025Tracing LLM Reasoning Processes with Strategic Games: A Framework for Planning, Revision, and Resource-Constrained Decision Making
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agents
- 2025AgenticEval: Toward Agentic and Self-Evolving Safety Evaluation of Large Language Models
- 2025MAEBE: Multi-Agent Emergent Behavior Framework
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety